CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986: Untrusted Search Path

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986

Clementine v.1.3.1 is vulnerable to a DLL hijacking issue caused by an untrusted search path in the QUSEREX.DLL component. A local attacker can execute arbitrary code by placing a crafted malicious DLL in the directory C:\Users\\AppData\Local\Microsoft\WindowsApps\. When the application launches,...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

Siemens Solid Edge DLL Hijacking Vulnerability

Solid Edge is a portfolio of software tools that address a variety of product development processes: 3D design, simulation, manufacturing and design management. Siemens Solid Edge suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute arbitrary code by placing a...

CVE-2024-47942

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 9. The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...

CVE-2024-47194

A vulnerability has been identified in ModelSim All versions V2024.3, Questa All versions V2024.3. vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate...

CVE-2024-47194

Summary (CVE-2024-47194) : Siemens Questa and ModelSim are affected up to versions prior to V2024.3. The vulnerability arises because the vish2.exe launcher can load a DLL from the current working directory, enabling an authenticated local attacker to execute arbitrary code and escalate privilege...

CVE-2024-47194

A vulnerability has been identified in ModelSim All versions V2024.3, Questa All versions V2024.3. vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate...

CVE-2024-45874

A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Vooki.exe...

CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

CVE-2024-45873

The VegaBird Yaazhini vulnerability scanner, version 2.0.2 , is susceptible to a DLL hijacking vulnerability. An attacker can execute arbitrary code or maintain persistence by placing a crafted DLL file (such as dcomp.dll ) in the same directory as Yaazhini.exe (e.g., C:\Users\\AppData\Local\Prog...

APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor

A South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw in Kingsoft WPS Office to deploy a bespoke backdoor dubbed SpyGlace. The activity has been attributed to a threat actor dubbed APT-C-60, according to cybersecuri...

Yokogawa CENTUM Improper Access Control (CVE-2024-5650)

If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are as...

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

The North Korea-linked threat actor known as Moonstone Sleet has continued to push malicious npm packages to the JavaScript package registry with the aim of infecting Windows systems, underscoring the persistent nature of their campaigns. The packages in question, harthat-api and harthat-hash, we...

New Windows Backdoor BITSLOTH Exploits BITS for Stealthy Communication

Cybersecurity researchers have discovered a previously undocumented Windows backdoor that leverages a built-in feature called Background Intelligent Transfer Service BITS as a command-and-control C2 mechanism. The newly identified malware strain has been codenamed BITSLOTH by Elastic Security Lab...

CVE-2024-41139

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privile...

CVE-2024-41139

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privile...

CVE-2024-41139

An incorrect privilege assignment vulnerability (CWE-266) exists in SKYSEA Client View versions 6.010.06 through 19.210.04e . A user with login access to a PC where the Windows client is installed can place a specially crafted DLL file in a specific folder, leading to arbitrary code execution wit...